Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.mft
File: l9I64ozYYMjt_WGDVvizH15NySg.mft (raw, json)
Hash identifier: iU8FUgpwszI0kXtYhPHhhnRCOFmcNv8OG2pjfaO+UKY=
Subject key identifier: A4:71:D1:64:70:20:2F:61:0B:E4:4D:4D:57:5D:85:61:22:6E:81:13
Authority key identifier: 97:D2:3A:E2:8C:D8:60:C8:ED:FD:61:83:56:F8:B3:1F:5E:4D:C9:28
Certificate issuer: /CN=97d23ae28cd860c8edfd618356f8b31f5e4dc928
Certificate serial: 019A29305683D1B752EE4AD5CF46A4EC2E78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l9I64ozYYMjt_WGDVvizH15NySg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.mft
Manifest number: 0A09
Signing time: Tue 28 Oct 2025 05:00:25 +0000
Manifest this update: Tue 28 Oct 2025 05:00:25 +0000
Manifest next update: Wed 29 Oct 2025 05:00:25 +0000
Files and hashes: 1: QZlBG2kRh6vni73fkptkgN279c4.roa (hash: XJG4jHJv96gh6e1pmElIHEBthdc/xrtURDP4u20xHEU=)
2: jODSDZiB_9CDcQXiT4tsxNlR8Ac.roa (hash: JEMeTXjwzca2z04dyMlf/bVf4aF3EAXQNY7E1cjOdx4=)
3: l9I64ozYYMjt_WGDVvizH15NySg.crl (hash: OFSkAkOAujIduCUyJKrMDX9ZHkZn8WbZ8ozAfssHKtU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.mft
rsync://rpki.ripe.net/repository/DEFAULT/l9I64ozYYMjt_WGDVvizH15NySg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:29:30:56:83:d1:b7:52:ee:4a:d5:cf:46:a4:ec:2e:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97d23ae28cd860c8edfd618356f8b31f5e4dc928
Validity
Not Before: Oct 28 05:00:25 2025 GMT
Not After : Oct 29 05:00:25 2025 GMT
Subject: CN=a471d16470202f610be44d4d575d8561226e8113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c8:76:e1:2d:eb:67:45:ef:0b:5c:24:2e:9e:
fd:13:e2:92:9e:1b:4f:26:42:37:4c:fd:cb:3c:02:
e1:ed:ed:f0:f2:10:c1:3c:3f:a7:69:18:ad:ff:11:
94:94:aa:3c:ca:e9:02:33:d6:ca:7f:3d:51:f3:f9:
d6:19:9e:57:b1:ae:69:4a:61:15:6c:16:ed:46:4d:
b1:c6:5c:94:95:d5:a8:31:a6:bb:92:92:5f:9c:54:
d9:bc:0d:d4:74:a2:a1:a4:32:e9:43:fb:ca:a2:cb:
ab:cb:9a:07:ad:14:99:cb:05:81:18:fe:14:22:82:
d5:fd:44:0a:83:5f:dd:21:ef:05:62:c7:f2:45:de:
e4:83:ea:6f:a5:2a:77:0d:91:f8:c3:e7:76:db:e3:
92:63:d2:96:a3:a9:d0:1a:b8:fb:c7:1b:2b:06:40:
1f:2b:38:83:0d:c7:a9:55:d2:b2:94:f5:7d:c5:61:
d0:c6:82:76:0f:bc:ec:45:5f:85:dc:f3:2a:68:7a:
37:13:1c:ca:fe:7a:99:8e:de:0d:ff:d2:97:24:9e:
7e:b3:62:cc:38:ae:9c:91:47:1b:5d:5e:cb:96:d2:
ea:22:39:97:8c:99:e0:e9:92:58:2b:d0:5f:a9:94:
51:12:cc:9b:72:31:e4:17:cd:51:92:90:fc:23:60:
3c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:71:D1:64:70:20:2F:61:0B:E4:4D:4D:57:5D:85:61:22:6E:81:13
X509v3 Authority Key Identifier:
keyid:97:D2:3A:E2:8C:D8:60:C8:ED:FD:61:83:56:F8:B3:1F:5E:4D:C9:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l9I64ozYYMjt_WGDVvizH15NySg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:a5:46:b4:75:bb:44:cc:3c:3c:41:fc:58:dc:f1:c4:38:2d:
fd:06:b9:67:00:47:5a:37:fc:39:30:ab:28:a1:5c:f4:1f:a4:
95:f3:33:3f:a0:c3:8c:c2:22:ce:15:30:01:79:eb:d8:94:88:
72:cb:b1:59:3b:41:75:55:de:e2:54:f0:14:7b:08:3b:12:f1:
be:99:bb:fa:61:7e:c6:b0:1d:fa:28:b1:84:9c:6a:e0:66:46:
14:6d:4d:f7:42:cd:98:3e:dd:6f:53:54:3d:51:6f:65:8c:9c:
e1:5e:2c:20:f4:31:05:0d:1d:fa:bc:65:c5:17:9c:40:f3:22:
8f:a4:a2:3b:34:91:4f:a0:15:53:e0:57:07:e7:4f:52:a4:38:
54:5b:73:10:f6:db:0f:22:e5:2b:51:06:97:40:9f:38:47:96:
3f:f1:59:72:a6:8b:85:88:e2:4c:c8:50:c1:a3:28:66:9b:06:
99:8b:3d:77:01:12:d5:a0:70:b4:5d:4a:22:ad:2b:ca:7e:b0:
42:f6:8d:4e:6e:01:cb:74:fa:fa:c2:06:e9:47:aa:1f:0d:e7:
e8:e5:bd:90:24:31:e3:1f:03:d9:6b:b7:11:37:cc:f3:87:54:
e2:77:af:54:4b:3a:f0:72:6e:b6:5a:3f:40:62:b3:db:5b:45:
f2:4f:aa:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZopMFaD0bdS7krVz0ak7C54MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3ZDIzYWUyOGNkODYwYzhlZGZkNjE4MzU2ZjhiMzFmNWU0
ZGM5MjgwHhcNMjUxMDI4MDUwMDI1WhcNMjUxMDI5MDUwMDI1WjAzMTEwLwYDVQQD
EyhhNDcxZDE2NDcwMjAyZjYxMGJlNDRkNGQ1NzVkODU2MTIyNmU4MTEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnch24S3rZ0XvC1wkLp79E+KSnhtP
JkI3TP3LPALh7e3w8hDBPD+naRit/xGUlKo8yukCM9bKfz1R8/nWGZ5Xsa5pSmEV
bBbtRk2xxlyUldWoMaa7kpJfnFTZvA3UdKKhpDLpQ/vKosury5oHrRSZywWBGP4U
IoLV/UQKg1/dIe8FYsfyRd7kg+pvpSp3DZH4w+d22+OSY9KWo6nQGrj7xxsrBkAf
KziDDcepVdKylPV9xWHQxoJ2D7zsRV+F3PMqaHo3ExzK/nqZjt4N/9KXJJ5+s2LM
OK6ckUcbXV7LltLqIjmXjJng6ZJYK9BfqZRREsybcjHkF81RkpD8I2A83QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKRx0WRwIC9hC+RNTVddhWEiboETMB8GA1UdIwQY
MBaAFJfSOuKM2GDI7f1hg1b4sx9eTckoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDlJNjRvellZTWp0X1dHRFZ2aXpIMTVOeVNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9jYTY0MWYtZGIzYS00ZjY0LWEyNWIt
Y2ZhNmE5MTQ4MWUyLzEvbDlJNjRvellZTWp0X1dHRFZ2aXpIMTVOeVNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC9jYTY0MWYtZGIzYS00ZjY0LWEyNWItY2ZhNmE5MTQ4MWUy
LzEvbDlJNjRvellZTWp0X1dHRFZ2aXpIMTVOeVNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXaVGtHW7
RMw8PEH8WNzxxDgt/Qa5ZwBHWjf8OTCrKKFc9B+klfMzP6DDjMIizhUwAXnr2JSI
csuxWTtBdVXe4lTwFHsIOxLxvpm7+mF+xrAd+iixhJxq4GZGFG1N90LNmD7db1NU
PVFvZYyc4V4sIPQxBQ0d+rxlxRecQPMij6SiOzSRT6AVU+BXB+dPUqQ4VFtzEPbb
DyLlK1EGl0CfOEeWP/FZcqaLhYjiTMhQwaMoZpsGmYs9dwES1aBwtF1KIq0ryn6w
QvaNTm4By3T6+sIG6UeqHw3n6OW9kCQx4x8D2Wu3ETfM84dU4nevVEs68HJutlo/
QGKz21tF8k+qRw==
-----END CERTIFICATE-----
Generated at Tue Oct 28 13:14:25 2025 by rpki-client